CVE-2024-41925: Optigo Ons-s8 Firmware

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.

Affected products

• Optigo Ons-s8 Firmware: up to and including 1.3.7
• Optigo Networks Ons-s8 Spectra Aggregation Switch: up to and including 1.3.7

Published 2024-10-03. Last modified 2026-06-17.